Public exploitation
Exploit catalog
Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.
87,464cataloged exploits
40,695CVEs with public exploitation
24,696lab-tested
AllReferência 26,426Exploit-DB 24,489GitHub PoC 18,182VulnCheck XDB 10,251Nuclei 4,577Metasploit 3,539✓ verified onlyrecentpopularrisk
87,464 exploits
GitHub PoC★ 1
Two PHP session CVEs (CVE-2026-109618, CVE-2026-109619) — reproducible exploits: pure-HTTP ASLR bypass and unserialize-to-RCE
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Engine-level PHP2SHELL (CVE-2026-109618/109619) lab: stock PHP RCE, interactive exploit, multi-worker/TLS/OOB, Docker evidence.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
manual driver mapper that abuses ThrottleStop.sys (CVE-2025-7771) for physical r/w. pdb symbols, pfn va->pa map, NtAddAtom trampoline, calls DriverEntry.
Code Execution / Escalation of Privileges in ThrottleStop
41RISK
open ↗GitHub PoC★ 3
Reverse proxy that blocks PHP parser exploits (CVE-2026-109618/109619) by replaying requests through an 11-version canary array. Compensating control for EOL PHP 5.6–8.1.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to cont
33RISK
open ↗GitHub PoC
PoC for CVE-2026-94293 — missing authentication (CWE-306) in Asset Administration Shell submodel API (CERT-VDE VDE-2026-108). Unauthenticated GET reads and PATCH overwrites industrial digital twin data. Verified on Python 3.14, stdlib only.
Missing authentication for critical function in the aas-edge-client REST API
28RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern
48RISK
open ↗GitHub PoC★ 27
Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC★ 5
Target-specific Android CVE-2026-98260 research port for Xiaomi nezha
exec: Cleanup POSIX timers right after de_thread()
41RISK
open ↗GitHub PoC
Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:z
33RISK
open ↗GitHub PoC
Is your server exposed to PHP2Shell? Free, open-source exposure test and consent-gated exploit validation for CVE-2026-109618 / CVE-2026-109619. Web, API and CLI.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Passive, self-hosted PHP vulnerability exposure scanner (PHP2Shell CVE-2026-109618/109619, CVE-2026-115560) with a plain-English patch report. PWA, CLI, Docker. Zero dependencies.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Non-destructive checker for PHP2Shell (CVE-2026-109618 / CVE-2026-109619) — read-only, stdlib-only Python. PHP 취약점 비파괴 점검 도구
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Standalone defensive checker project for CVE-2026-56848: Node.js: HTTP/2 reentrant send use-after-free. One exploit per repository; implementation pending.
A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_m
41RISK
open ↗GitHub PoC★ 3
Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Defensive toolkit for PHP servers after PHP2Shell (CVE-2026-109618/9): fleet patch audit incl. distro backports & end-of-life PHP, php.ini hardening, owner-only website leak check, and access-log attack detection with canary traps. A–F graded, fix-first reports. Python, no dependencies.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Metodologia completa de auditoria web - 7 fases - PHP2Shell RCE CVE-2026-109618, Wazuh Baseline 17 regras, MITRE ATT&CK - Por Filipe Gabriel SOC Analyst Luanda
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Multi-method remote PHP version detector with PHP2Shell (CVE-2026-109618/109619) triage
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Check a PHP install for the PHP2Shell fixes (CVE-2026-109618, CVE-2026-109619), including Ubuntu backports, and show interim mitigations.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Educational HTML/CSS/JS visualization of CVE-2026-109618 — a PHP out-of-memory / longjmp() request-state corruption issue. For security awareness and blue-team training only.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON/CSV/HTML reports.
Docker Hub account conversion could reassign an active personal access token to another user
48RISK
open ↗GitHub PoC
Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extrac
41RISK
open ↗GitHub PoC
PHP2Shell — CVE-2026-109618 & CVE-2026-109619 research hub
RCE via OOM corruption
100RISK
open ↗GitHub PoC
Cross-platform PHP2Shell (CVE-2026-109618 / CVE-2026-109619) scanner/fixer/verifier — scan, mitigate, upgrade, verify. Zero-dependency Python.
RCE via OOM corruption
100RISK
open ↗GitHub PoC
PHP2Shell(CVE-2026-109618/109619) 원리와 PHP 버전별 대응을 택배 창고 비유로 설명하는 교육용 페이지
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
php2shell CVE-2026-109618 CVE-2026-109619 tracks php2shell, cve php2shell and php2shell cve. php2shell vulnerability plus php cve 2026 (cve php 2026), php cve patch: 8.5.12, 8.4.27, 8.3.36, 8.2.35. php cve rce, php security.
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
CVE-2026-109618/109619 — PHP session.upload_progress pre-auth RCE toolkit + hands-on labs
RCE via OOM corruption
100RISK
open ↗GitHub PoC★ 1
Loopback-only PHP2Shell research lab for CVE-2026-109618 and CVE-2026-109619
RCE via OOM corruption
100RISK
open ↗GitHub PoC
php2shell (CVE-2026-109618/109619) 利用工具：带来源与日期的指纹库、两条引擎、免 gdb 标定；含源码级结论——本链下限 PHP 7.0。
RCE via OOM corruption
100RISK
open ↗We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.